PT-2014-6369
CVE-2014-5253
·
تاريخ النشر
2014-08-15
·
تاريخ التحديث
2022-05-17
الوصف من
CVSS 4.0
7.1
عاليةالمقاييسAV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
OpenStack Identity (Keystone) versions 2014.1.x before 2014.1.2.1
OpenStack Identity (Keystone) version Juno before Juno-3
Description
The issue allows remote authenticated users to retain access via a domain-scoped token for an invalidated domain. This occurs because OpenStack Identity (Keystone) does not properly revoke tokens when a domain is invalidated.
Recommendations
For OpenStack Identity (Keystone) versions 2014.1.x before 2014.1.2.1, update to version 2014.1.2.1 or later to resolve the issue.
For OpenStack Identity (Keystone) version Juno before Juno-3, update to Juno-3 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾